Public SourceMage Discussion List

[Ladislav Hagara <ladislav.hagara AT unob.cz>]

> Did you allow them to get restored to /etc/shadow by the one-time
> prompt to
> fix that bug, or no? That is, are they still in /etc/passwd from the last
> bug, or is this happening again?

It is another box and "sorcery system-update" was really unattended so
only default answers.
Just found out that /etc/pam.d/login is missing.
I will try to restore it.

-- 
Ladislav Hagara

>From my log:
Mar 12 17:05:44 naboo login[3896]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty1]
user=[root] ruser=[<unk
nown>] rhost=[]
Mar 12 17:05:47 naboo login[3896]: FAILED LOGIN (1) on '/dev/tty1' FOR
`root', Authentication failure
Mar 12 17:05:47 naboo login[3896]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty1]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:05:49 naboo login[3896]: FAILED LOGIN (2) on '/dev/tty1' FOR
`UNKNOWN', Authentication failure
Mar 12 17:05:49 naboo login[3896]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty1]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:05:52 naboo login[3896]: FAILED LOGIN (3) on '/dev/tty1' FOR
`UNKNOWN', Authentication failure
Mar 12 17:05:52 naboo login[3896]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty1]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:05:55 naboo login[3897]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty2]
user=[hgr] ruser=[<unkn
own>] rhost=[]
Mar 12 17:05:55 naboo login[3896]: FAILED LOGIN (4) on '/dev/tty1' FOR
`UNKNOWN', Authentication failure
Mar 12 17:05:55 naboo login[3896]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty1]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:05:58 naboo login[3897]: FAILED LOGIN (1) on '/dev/tty2' FOR
`hgr', Authentication failure
Mar 12 17:05:58 naboo login[3897]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty2]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:05:58 naboo login[3896]: TOO MANY LOGIN TRIES (5) on
'/dev/tty1' FOR `UNKNOWN'
Mar 12 17:06:01 naboo login[3897]: FAILED LOGIN (2) on '/dev/tty2' FOR
`UNKNOWN', Authentication failure
Mar 12 17:06:01 naboo login[3897]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty2]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:06:04 naboo login[3897]: FAILED LOGIN (3) on '/dev/tty2' FOR
`UNKNOWN', Authentication failure
Mar 12 17:06:04 naboo login[3897]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty2]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:06:07 naboo login[3897]: FAILED LOGIN (4) on '/dev/tty2' FOR
`UNKNOWN', Authentication failure
Mar 12 17:06:07 naboo login[3897]: pam_warn(login:auth):
function=[pam_sm_authenticate] service=[login] terminal=[/dev/tty2]
user=[<unknown>] ruser=
[<unknown>] rhost=[]
Mar 12 17:06:10 naboo login[3897]: TOO MANY LOGIN TRIES (5) on
'/dev/tty2' FOR `UNKNOWN'